PRIVACY POLICY

4 Main Street, Inc.

Effective Date: January 26, 2026

Privacy Policy URL: www.4mainstreet.ai/privacy

1. INTRODUCTION

4 Main Street, Inc. ("4 Main Street," "we," "us," or "our") respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered business communication platform, including SMS, voice, web, and video services (collectively, the "Services").

This Privacy Policy applies to information we collect:

  • Through our website at www.4mainstreet.ai
  • Through our Services and platform
  • Via email, text, telephone, and other electronic communications
  • When you interact with our applications or advertisements

Please read this Privacy Policy carefully. By accessing or using our Services, you agree to this Privacy Policy. If you do not agree with our policies and practices, do not use our Services.

2. INFORMATION WE COLLECT

We collect several types of information from and about users of our Services:

2.1 Information You Provide to Us

Account Information:

  • Name, email address, phone number
  • Business name and address
  • Billing information (credit card details, billing address)
  • Account credentials (username, password)
  • Profile information and preferences

Customer Contact Data:

  • Contact lists you upload (names, phone numbers, email addresses)
  • Customer interaction data and communication history
  • Consent records and opt-out preferences
  • Custom fields and tags you create

Communications Content:

  • SMS messages sent and received through our platform
  • Voice call recordings and transcripts (all calls include an automated recording disclosure)
  • Video messages and communications
  • Chat conversations and support tickets
  • Any other content you transmit through our Services

Support and Feedback:

  • Customer support inquiries and correspondence
  • Survey responses and feedback
  • User-generated content and testimonials

2.2 Information We Collect Automatically

Usage Information:

  • Pages viewed, features used, and time spent on our Services
  • Message delivery status and engagement metrics
  • API calls and system interactions
  • Search queries and navigation patterns
  • Campaign performance and analytics data

Device and Browser Information:

  • IP address and geolocation data
  • Device type, operating system, and browser type
  • Device identifiers (UDID, advertising ID)
  • Screen resolution and device settings
  • Language preferences

Cookies and Tracking Technologies:

  • Session cookies and authentication tokens
  • Analytics cookies (Google Analytics, etc.)
  • Preference cookies for user settings
  • Local storage and similar technologies

2.3 Information from Third Parties

We may receive information about you from:

  • Telecommunications carriers (delivery status, phone number validation)
  • Payment processors (transaction confirmations)
  • Business partners and integration platforms
  • Public databases and data enrichment services
  • Social media platforms (if you connect your accounts)
  • Marketing and analytics providers

2.4 AI-Generated and Derived Data

Our AI systems may generate or derive additional information, including:

  • Sentiment analysis and conversation insights
  • Predicted customer preferences and behavior patterns
  • Automated categorizations and tags
  • Performance recommendations and optimization suggestions
  • Aggregated and anonymized analytics

2.5 Biometric Data

We do not collect biometric identifiers or biometric information as defined under applicable state laws, including the Illinois Biometric Information Privacy Act (BIPA). Our Voice Services use speech-to-text transcription and conversational AI but do not create voiceprints or use voice recognition for identification purposes.

3. DATA OWNERSHIP AND USAGE RIGHTS

3.1 Customer Contact Data

You retain ownership of customer contact information (names and phone numbers) that you provide to the Services ("Contact Data"). By uploading Contact Data, you grant us a worldwide, non-exclusive, royalty-free license to use, store, and process Contact Data to provide the Services and as otherwise described in this Privacy Policy.

3.2 Platform-Generated Content

We own all content generated by our platform, including SMS messages, AI-generated voice conversations, call recordings, transcripts, and any other communications created through our Services ("Platform Content"). You are granted a license to use Platform Content solely in connection with your use of the Services.

3.3 Derived and Aggregated Data

We own all derived, aggregated, and anonymized data generated from your use of the Services, including AI models, algorithms, analytics, usage patterns, performance metrics, and insights. We may use this data for any lawful business purpose, including improving our Services, developing new products, training and licensing AI models, conducting research, and creating industry benchmarks and reports.

4. HOW WE USE YOUR INFORMATION

We use the information we collect for the following purposes:

4.1 To Provide and Maintain Our Services

  • Create and manage your account
  • Process and deliver SMS, voice, and video communications
  • Provide customer support and respond to inquiries
  • Monitor and improve service performance
  • Send transactional notifications and service updates
  • Process payments and manage billing

4.2 To Improve and Develop Our Services

  • Analyze usage patterns and user behavior
  • Develop new features and functionality
  • Train and improve our AI models and algorithms
  • Conduct research and analytics
  • Test and troubleshoot technical issues
  • Measure and optimize campaign performance

4.3 For AI and Machine Learning

  • Train AI models to improve response quality and accuracy
  • Generate automated responses and suggestions
  • Analyze communication patterns for insights
  • Personalize user experience and recommendations
  • Detect and prevent fraud or abuse
  • Develop and enhance our AI algorithms and machine learning models
  • Create aggregated datasets for research and development

4.4 For Marketing and Communications

  • Send promotional emails and product updates (with your consent)
  • Provide personalized recommendations
  • Conduct surveys and request feedback
  • Offer customer incentives and promotions

You can opt out of marketing communications at any time using the unsubscribe link in our emails.

4.5 For Legal and Security Purposes

  • Comply with legal obligations and regulations
  • Enforce our Terms of Service and policies
  • Protect against fraud, abuse, and security threats
  • Respond to law enforcement requests
  • Resolve disputes and legal claims
  • Protect the rights, property, and safety of 4 Main Street, our users, and others

5. HOW WE SHARE YOUR INFORMATION

We do not sell your personal information. We may share your information in the following circumstances:

5.1 Service Providers and Business Partners

We share information with third-party service providers who perform services on our behalf, including:

  • Telecommunications Carriers: To deliver SMS and voice communications
  • Cloud Hosting Providers: To store data and host our Services (e.g., AWS, Google Cloud)
  • Payment Processors: To process billing and payments (e.g., Stripe)
  • Analytics Providers: To understand usage patterns (e.g., Google Analytics)
  • Customer Support Tools: To provide customer service
  • Email Service Providers: To send communications
  • Security and Fraud Prevention Services: To protect our platform

These service providers are contractually obligated to protect your information and use it only for the purposes we specify.

5.2 Business Transfers

If we are involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, your information may be transferred as part of that transaction. We will provide notice before your information is transferred and becomes subject to a different privacy policy.

5.3 Legal Requirements and Protection

We may disclose your information if required to do so by law or in response to:

  • Valid legal process (subpoenas, court orders, warrants)
  • Law enforcement or government agency requests
  • Investigations of potential violations of our Terms of Service
  • Protection of the rights, property, or safety of 4 Main Street, our users, or the public
  • Prevention or investigation of fraud or security threats

5.4 With Your Consent

We may share your information with third parties when you explicitly consent or direct us to do so, such as:

  • Integrating with third-party platforms you authorize
  • Sharing testimonials or case studies (with your permission)
  • Participating in joint marketing initiatives

5.5 Aggregated and Anonymized Data

We may share aggregated, de-identified, or anonymized information that cannot reasonably be used to identify you, including:

  • Industry trends and benchmarks
  • Service usage statistics
  • Research and public reports

5.6 Franchise Systems

If you operate as a franchisee or licensee of a franchise system, we may share information related to your use of the Services with your franchisor, including account status, usage metrics, performance data, message volumes, response rates, customer reviews, and aggregated customer data. This sharing may occur pursuant to agreements between us and your franchisor or as part of franchise-wide reporting and analytics. Such data sharing is a condition of your use of the Services and may not be opted out of.

5.7 Carrier and Regulatory Compliance

We may share information with telecommunications carriers, industry registries (such as The Campaign Registry), and regulatory bodies as required for A2P messaging compliance, campaign registration, spam prevention, and response to carrier or regulatory inquiries. This may include message content, sender information, consent records, and delivery data.

5.8 Consent Verification

We may request documentation from you demonstrating your compliance with consent requirements for contacts in your account. We may share such documentation with carriers or regulatory bodies if required to respond to complaints or inquiries.

6. DATA SECURITY

6.1 Call Recording

Our Voice Services record, transcribe, and analyze all calls for quality assurance, service improvement, AI training, and compliance purposes. All calls include an automated disclosure at the beginning notifying consumers that the call may be recorded. Call recordings and transcripts are retained in accordance with our data retention policies and applicable legal requirements.

6.2 Security Measures

We implement reasonable administrative, technical, and physical security measures to protect your information from unauthorized access, use, alteration, or destruction. These measures include:

  • Encryption: Data encryption in transit (TLS/SSL) and at rest
  • Access Controls: Role-based access and authentication requirements
  • Network Security: Firewalls, intrusion detection, and security monitoring
  • Regular Audits: Security assessments and vulnerability testing
  • Employee Training: Security awareness and data handling procedures
  • Incident Response: Procedures for detecting and responding to security incidents

However, no security system is impenetrable. We cannot guarantee the absolute security of your information. Any transmission of information is at your own risk. If you believe your account has been compromised, please contact us immediately at security@4mainstreet.ai.

7. DATA RETENTION

We retain your information for as long as necessary to provide our Services and fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

7.1 Account Information

We retain your account information for as long as your account is active or as needed to provide you with Services. After account termination, we may retain certain information for:

  • Legal compliance and regulatory requirements
  • Dispute resolution and enforcement of agreements
  • Fraud prevention and security purposes
  • Backup and disaster recovery (typically 30-90 days)

7.2 Communication Data

We retain communication logs, message content, and call recordings based on:

  • Your account settings and retention preferences
  • Legal and regulatory requirements (varies by jurisdiction)
  • Typically 30-90 days for standard accounts, longer for compliance purposes

7.3 Analytics and Usage Data

Aggregated and anonymized data may be retained indefinitely for analytics, research, and service improvement purposes.

7.4 Your Rights to Deletion

You may request deletion of your personal information at any time, subject to legal retention requirements. See Section 9 (Your Privacy Rights) for more information.

8. COOKIES AND TRACKING TECHNOLOGIES

8.1 What Are Cookies?

Cookies are small text files stored on your device by your web browser. We use cookies and similar tracking technologies to recognize you, remember your preferences, and improve your experience.

8.2 Types of Cookies We Use

Essential Cookies: Required for the Services to function properly

  • Authentication and session management
  • Security and fraud prevention
  • Load balancing and performance

Analytics Cookies: Help us understand how users interact with our Services

  • Google Analytics (usage patterns, page views)
  • Performance monitoring and error tracking
  • Feature usage and engagement metrics

Functionality Cookies: Remember your preferences and settings

  • Language and region preferences
  • Dashboard customizations
  • Theme and display options

Marketing Cookies: Used for advertising and retargeting (with your consent)

  • Social media integration
  • Conversion tracking
  • Personalized advertising

8.3 Managing Cookies

You can control cookies through your browser settings. Most browsers allow you to:

  • View and delete existing cookies
  • Block all or third-party cookies
  • Receive notifications before cookies are stored

Note that disabling cookies may limit your ability to use certain features of our Services.

8.4 Do Not Track Signals

Some browsers include a "Do Not Track" (DNT) feature. Currently, there is no industry standard for responding to DNT signals, and our Services do not respond to DNT browser settings.

9. YOUR PRIVACY RIGHTS

Depending on your location, you may have certain rights regarding your personal information:

9.1 General Rights (All Users)

  • Access: Request a copy of the personal information we hold about you
  • Correction: Request correction of inaccurate or incomplete information
  • Deletion: Request deletion of your personal information
  • Opt-Out: Unsubscribe from marketing communications
  • Data Portability: Receive your data in a portable format

9.2 GDPR Rights (European Economic Area, UK, Switzerland)

If you are located in the EEA, UK, or Switzerland, you have additional rights under the General Data Protection Regulation (GDPR):

  • Right to Access: Obtain confirmation of data processing and access to your data
  • Right to Rectification: Correct inaccurate personal data
  • Right to Erasure ("Right to be Forgotten"): Request deletion of your data
  • Right to Restriction: Limit how we process your data
  • Right to Data Portability: Receive your data in a machine-readable format
  • Right to Object: Object to processing based on legitimate interests or for marketing
  • Right to Withdraw Consent: Withdraw consent for processing at any time
  • Right to Lodge a Complaint: File a complaint with your data protection authority

Legal Basis for Processing (GDPR):

We process your personal information based on:

  • Contract Performance: To provide our Services to you
  • Legitimate Interests: To improve our Services, prevent fraud, and ensure security
  • Legal Obligations: To comply with applicable laws and regulations
  • Consent: Where you have given explicit consent (e.g., marketing communications)

9.3 CCPA/CPRA Rights (California Residents)

If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

  • Right to Know: Request disclosure of data collection and sharing practices
  • Right to Delete: Request deletion of personal information
  • Right to Correct: Request correction of inaccurate personal information
  • Right to Opt-Out: Opt out of the "sale" or "sharing" of personal information
  • Right to Limit: Limit use of sensitive personal information
  • Right to Non-Discrimination: Not be discriminated against for exercising your rights

California "Shine the Light" Law: California residents may request information about our disclosure of personal information to third parties for direct marketing purposes.

We Do Not Sell Personal Information: 4 Main Street does not sell personal information as defined under CCPA/CPRA.

9.4 Other State Privacy Laws

If you are a resident of Colorado, Connecticut, Utah, Virginia, or other states with comprehensive privacy laws, you may have similar rights. Please contact us to exercise your rights.

9.5 How to Exercise Your Rights

To exercise any of your privacy rights, please:

  • Email us at privacy@4mainstreet.ai
  • Submit a request through your account settings

We will respond to your request within the timeframe required by applicable law (typically 30-45 days). We may need to verify your identity before processing your request.

10. INTERNATIONAL DATA TRANSFERS

4 Main Street is based in the United States. If you access our Services from outside the United States, your information may be transferred to, stored, and processed in the United States or other countries where our service providers operate.

These countries may have data protection laws that differ from those in your country. By using our Services, you consent to the transfer of your information to the United States and other countries.

For users in the EEA, UK, and Switzerland, we rely on:

  • Standard Contractual Clauses (SCCs) approved by the European Commission
  • Adequacy decisions by the European Commission
  • Other lawful transfer mechanisms as appropriate

11. CHILDREN'S PRIVACY

Our Services are not directed to children under the age of 18, and we do not knowingly collect personal information from children under 18. If you are under 18, do not use our Services or provide any information to us.

If we learn that we have collected personal information from a child under 18 without parental consent, we will delete that information promptly. If you believe we may have collected information from a child under 18, please contact us at privacy@4mainstreet.ai.

12. THIRD-PARTY SERVICES AND LINKS

Our Services may contain links to third-party websites, applications, or services that are not owned or controlled by 4 Main Street. This Privacy Policy does not apply to third-party services.

We are not responsible for the privacy practices of third parties. We encourage you to review the privacy policies of any third-party services before providing them with your information.

Third-party integrations we may use include:

  • Payment processors (Stripe, PayPal)
  • Cloud providers (AWS, Google Cloud)
  • Analytics services (Google Analytics)
  • CRM and marketing platforms
  • Social media platforms

13. AI AND AUTOMATED DECISION-MAKING

13.1 Use of AI in Our Services

We use artificial intelligence and machine learning to power our communication services, including:

  • Generating automated responses to customer inquiries
  • Analyzing sentiment and conversation context
  • Predicting optimal communication timing and messaging
  • Personalizing user experience and recommendations
  • Detecting spam, fraud, and abusive behavior

13.2 Human Oversight

While we use AI extensively, our customers maintain control over their communications. We encourage human review of AI-generated content before deployment, especially for sensitive or high-stakes communications.

13.3 Your Rights Regarding Automated Decisions

Under certain privacy laws (including GDPR), you have the right to:

  • Be informed about automated decision-making that significantly affects you
  • Request human intervention or review of automated decisions
  • Challenge decisions made solely by automated means

If you believe an automated decision has adversely affected you, please contact us at privacy@4mainstreet.ai.

14. CALIFORNIA SPECIFIC DISCLOSURES

14.1 Categories of Personal Information Collected

In the past 12 months, we have collected the following categories of personal information:

  • Identifiers: Name, email, phone number, IP address, account ID
  • Commercial Information: Purchase history, payment information, service usage
  • Internet Activity: Browsing history, search history, interaction with our Services
  • Geolocation Data: Approximate location based on IP address
  • Professional Information: Business name, industry, job title
  • Audio/Visual Information: Call recordings, video messages (where consented)
  • Inferences: Preferences, behavior patterns, characteristics derived from other information

14.2 Sources of Personal Information

  • Directly from you (account registration, uploads, communications)
  • Automatically through your use of our Services (usage data, cookies)
  • From third parties (carriers, payment processors, data providers)

14.3 Business and Commercial Purposes

We use personal information for the purposes described in Section 4 of this Privacy Policy.

14.4 Categories of Third Parties with Whom We Share

  • Service providers and business partners
  • Telecommunications carriers
  • Payment processors
  • Analytics and advertising providers
  • Law enforcement and government agencies (when required)

14.5 Retention Periods

We retain personal information for the periods described in Section 7 of this Privacy Policy.

15. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of material changes by:

  • Posting the updated Privacy Policy at www.4mainstreet.ai/privacy
  • Updating the "Effective Date" at the top of this policy
  • Sending an email notification to your registered email address
  • Displaying a prominent notice on our website or Services

Your continued use of our Services after the effective date of the updated Privacy Policy constitutes your acceptance of the changes. We encourage you to review this Privacy Policy periodically.

If changes materially affect your rights, we will seek your affirmative consent where required by law.

16. CONTACT US

If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:

4 Main Street, Inc. Privacy Team Email: privacy@4mainstreet.ai Website: www.4mainstreet.ai Support: support@4mainstreet.ai

For GDPR and international privacy inquiries: Email: privacy@4mainstreet.ai

For California residents exercising CCPA rights: Email: privacy@4mainstreet.ai Subject line: "CCPA Privacy Request"

16.1 Response Time

We will respond to your inquiries and requests within:

  • 30 days for general inquiries
  • 30 days for GDPR requests (extendable by 60 days for complex requests)
  • 45 days for CCPA requests (extendable by 45 days)

16.2 Identity Verification

For security purposes, we may need to verify your identity before responding to certain requests. We may request additional information to confirm your identity and ensure we are disclosing information to the correct person.

BY USING OUR SERVICES, YOU ACKNOWLEDGE THAT YOU HAVE READ AND UNDERSTOOD THIS PRIVACY POLICY.

Last Updated: January 26, 2026